attacksurface

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.

Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam #bugbounty

A passive way to find backups/ sensitive information.

Sifter - All purpose penetration testing op-center

🔐 Welcome to Hack-Academia, your ultimate resource hub for all things 🖥️ hacking, 🔧 pentesting, and 🛡️ security research. Whether you are a 🌱 beginner looking to explore the world of cybersecurity or a 🧑‍💻 seasoned professional seeking cutting-edge techniques and insights, Hack-Academia is here to empower you. ⚡

DDWPasteRecon tool will help you identify code leak, sensitive files, plaintext passwords, password hashes. It also allow member of SOC & Blue Team to gain situational awareness of the organisation's web exposure on the pastesites. It Utilises Google's indexing of pastesites to gain targeted intelligence of the organisation. Blue & SOC teams can…

🔐 Welcome to Hack-Academia — your go-to destination for everything related to 🖥️ ethical hacking, 🔧 penetration testing, and 🛡️ cybersecurity research. Whether you're a 🌱 newcomer eager to dive into the cyber world or a 🧑‍💻 skilled expert searching for the latest tools and tactics, Hack-Academia is here to fuel your journey. ⚡

The OWASP Amass Homebrew Formula

Continuous External Attack Surface Discovery & Vulnerability Scanning Across AWS Organizations — Python CDK

AWS security scanner that finds hardcoded secrets and internet-exposed resources across all regions and 30+ AWS services.

ASM導入検討を進めるためのガイダンス（基礎編）

A simple Golang library to extract subdomains from any piece of text.

The detection of internal security controls at a company

Osint Harvester is a lightweight OSINT toolkit that collects and normalizes intelligence from multiple sources.

Automated Asset Collection System Based on Asset Breeding Engine

Dynamic_enum_Wizard is a curses-based wizard that conducts a wide range of security reconnaissance tasks while keeping the terminal output to a minimum.

Attack Surface Management Platform

This baseline delivers a hardened Windows 11 configuration that minimizes the risk of unauthorized third-party AI access while maintaining a productive user experience

A collection of Microsoft Security Windows Server policies to help organizations accelerate secure deployments to servers with Defender for Servers (Defender for Cloud), Defender Business for Servers and Endpoint for Servers with Intune.